General
-
Target
23c4666fd47c02fdf1ce358e4b8ca52cd9f3b2794f334387989aa5fbcc810aab.exe
-
Size
707KB
-
MD5
b5b252e317e4a15d6bc0aa7b1246ce32
-
SHA1
c17e772862e19ea2d20012f7ba1042cef3652da4
-
SHA256
23c4666fd47c02fdf1ce358e4b8ca52cd9f3b2794f334387989aa5fbcc810aab
-
SHA512
7b6235064190304d9fb6f0db810bb3e66f2f2a0ff55ed04242415caa935a29e3a7265f6fcee062b6c20f29dabc96078452b892a4633abe604ed8e2808c6a18c5
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1684vnh:6uaTmkZJ+naie5OTamgEoKxLWBGh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
23c4666fd47c02fdf1ce358e4b8ca52cd9f3b2794f334387989aa5fbcc810aab.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections